update apt provisioner:
- ensure apt-transport-https is always installed
- ability to enable/disable multiarch
- ability to override base apt sources